Federal Court Greenlights Negligence Claim in Rivers Casino Philadelphia Data Exposure Lawsuit

The US District Court for the Eastern District of Pennsylvania issued a ruling that permits a class-action negligence lawsuit against Rivers Casino Philadelphia to move forward after a November 2024 cyberattack exposed more than 2.56 terabytes of employee data on the dark web, and the decision highlights specific grounds for the negligence claim while rejecting several others.

Observers note the attack compromised Social Security numbers, driver’s licenses, and banking information belonging to employees, which then appeared on illicit forums, and plaintiffs connected these events to subsequent identity theft incidents plus increased spam communications directed at affected individuals.

Details of the November 2024 Cyberattack

The breach unfolded when unauthorized parties accessed and published extensive records from the casino’s systems, and reports confirm the volume exceeded 2.56 terabytes with personal identifiers forming the core of the exposed material, while the casino operates under ownership by Rush Street Gaming.

Those who reviewed the court filings point out that the data surfaced on dark web marketplaces shortly after the intrusion, and this sequence prompted employees to initiate legal action alleging inadequate safeguards around sensitive information storage and transmission.

Court’s Analysis of the Negligence Claim

Judge’s order established that the negligence allegations met the threshold for continued litigation because plaintiffs presented facts showing potential failures in data protection protocols, and the court allowed this portion of the complaint to advance while it simultaneously dismissed breach of contract and invasion of privacy counts for lack of supporting elements under applicable standards.

Evidence submitted included documentation of the exposed records and patterns of resulting harm, and the ruling clarifies that these materials create a viable path for the negligence case to proceed toward discovery and potential trial phases.

Plaintiff Allegations and Reported Impacts

Employees who joined the class action describe instances of identity theft and elevated spam activity following the disclosure, and court records tie these outcomes directly to the release of Social Security numbers along with banking details that became publicly accessible on underground sites.

Attorneys for the plaintiffs argue the casino’s handling of the data created foreseeable risks, and they seek compensation for costs incurred through credit monitoring, fraud resolution, and related mitigation steps taken after the November 2024 incident.

Casino Defense and Arguments Presented

Representatives for Rivers Casino Philadelphia and parent company Rush Street Gaming countered that identity theft and spam occur frequently across industries, and they maintained these issues do not necessarily stem from the specific data exposure in question.

The defense team emphasized that common external factors often contribute to such problems, and the court considered these points when evaluating which claims could survive the motion to dismiss stage.

Procedural Next Steps and Case Status

With the negligence claim intact, the litigation now enters the discovery phase where both sides will exchange additional evidence, and parties continue to prepare arguments ahead of any future motions or settlement discussions.

Records from the Eastern District of Pennsylvania show the matter remains active, and further hearings are anticipated as the case develops through standard federal procedures.

Conclusion

The ruling underscores the court’s determination that sufficient factual basis exists for the negligence portion of the lawsuit while other claims were set aside, and the proceedings continue to focus on the November 2024 exposure of employee data from Rivers Casino Philadelphia.